Extracted

• • Target

    SecuriteInfo.com.Trojan.PWS.RedLineNET.7.19291.11472.exe

  • Size

    1.1MB

  • MD5

    a1726bf066aabd7f6a69a0cf33bbc080

  • SHA1

    20044880fc0cad5e99da865c560d690c255a66fd

  • SHA256

    680b9f5fe758d33fe29491c3b071d5b0cce2bc8d941382a58670b632a8f51eba

  • SHA512

    5c3ff5053fcef7a10997830153c95eaa1b77a2d6ea898946c337633eed06241f58a3cee49b9f2826d864590b95369f91b6ad6dacf48995e1583325c2efc104ff

  • SSDEEP

    24576:skd1/jg7PvqovaBlM+EIPeEUJqbamPCwwpz:skM7PvqoEM4prnC3

  Score

  10^/10

  redlinetestinfostealerspyware

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2